Mozilla Skin

Privilege management

From GTwM

This page is part of the agileBase documentation

Description of the Privilege System

In agileBase, there are three privilege levels, as well as an extra 'Administrator' privilege.

The three privileges take effect per user per table, i.e. a user can have certain privileges on one table and different ones on another.

The levels are

  • VIEW: ability to read data only
  • EDIT: ability to read and edit data
  • MANAGE: ability to modify the database structure, i.e. create/delete tables, fields, reports etc., basically to build up and tear down databases. MANAGE also allows a user to unlock an individual record for editing if it has been locked.

For people with less privileges, the user interface is simplified.

Assigning Privileges

As an administrator, to assign privileges, use the Administrator module at the bottom of pane 1.

The administrator privilege doesn't apply to a particular table but is a global option that allows setting up of users, roles, assigning privileges and creating modules. To assign the administration privilege, you must make a user a member of the 'admincompanyname' role (there will be a role called this, using the actual company name)

If the number of users you manage starts to become large, you may want to assign them roles, which allows privileges to be managed on a mass basis. If a user has a certain role, he/she has all the privileges assigned to that role. Users can have more than one role.

To assign privileges, click on the 'Administration' module then 'users' or 'roles'. This will allow you to select a user/role and assign table privileges. Alternatively, you can come from the other direction by selecting a table from 'Tables' then going to the manage tab which will let you set user/role privileges for that one table.

When setting user privileges, agileBase will show any privileges that the user already has due to being a member of a role. In this example, the user has been given MANAGE privileges specifically on timesheets and performance criteria and is a member of a role that has MANAGE privileges on price list and roles.

image:Table_privileges.png